kirigami2 (CLEAN)

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 100%): The package builds from official KDE source tarball with valid PGP signature; the flagged low votes and recent upload are not security risks.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Antonio Rojas <arojas@archlinux.org>
    
      2
    
      3pkgname=kirigami2
    
      4pkgver=5.116.0
    
      5pkgrel=2
    
      6pkgdesc='A QtQuick based components set'
    
      7arch=(x86_64)
    
      8url='https://community.kde.org/Frameworks'
    
      9license=(LGPL)
    
      10groups=(kf5)
    
      11depends=(qt5-quickcontrols qt5-quickcontrols2 qt5-graphicaleffects)
    
      12makedepends=(extra-cmake-modules qt5-svg qt5-tools kpackage5)
    
      13source=(https://download.kde.org/stable/frameworks/${pkgver%.*}/$pkgname-$pkgver.tar.xz{,.sig})
    
      14sha256sums=('8b584da74a0c4488ad5e31c3d740a1813c35d28bc003fef8854963d17058c9e0'
    
      15            'SKIP')
    
      16validpgpkeys=('53E6B47B45CEA3E0D5B7457758D0EE648A48B3BB') # David Faure <faure@kde.org>
    
      17
    
      18build() {
    
      19  cmake -B build -S $pkgname-$pkgver \
    
      20    -DBUILD_TESTING=OFF
    
      21  cmake --build build
    
      22}
    
      23
    
      24package() {
    
      25  DESTDIR="$pkgdir" cmake --install build
    
      26}
    
      27
    
      28

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-29 00:29:17	Clean	2
2026-08-28 23:36:57	Low	1